From 55d222132be0115b48c6ea8214ea75830b9870b9 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Mon, 25 Jul 2016 22:26:15 +0200 Subject: [PATCH] Adding instructions on how to change default passwords. --- how_to_change_passwords.md | 79 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 79 insertions(+) create mode 100644 how_to_change_passwords.md diff --git a/how_to_change_passwords.md b/how_to_change_passwords.md new file mode 100644 index 0000000..d8e95ef --- /dev/null +++ b/how_to_change_passwords.md @@ -0,0 +1,79 @@ +# Default password for project # + +* Vault Password: `v4ul+Password!` +* amgmt user (server): `DoN0t4g3t!` +* bglug user (client): `s4lamanDr@` +* admin user (domain): `R0busTdom41nPa55wd!` + +# How to change passwords for production deployments # + +## Vault password ## + +Clone [`client-pull-installation`][2] then, in the working copy, launch following commands: + + $ git checkout -b mynewbranch + $ ansible-vault rekey domainpwd.vault + +`ansible-vault` will ask one time the old password and two times the new one. + +Once done with the password, commit the changes and push changes on github: + + $ git add domainpwd.vault + $ git commit "Changed vault password" + $ git push -u origin mynewbranch + +## *amgmt* user (server-side) ## + +Clone [`server-config`][1] then, in the working copy, launch following commands: + + $ git checkout -b amgmt_change_pwd + +Generate a new password hash with the follwing command: + + $ mkpasswd -m sha-512 + +The command would ask for the password to be hashed. Please copy the result string. + +Open up the file `roles/init/tasks/mgmtuser.yml`, find out `password:` and then replace previous hash with the one you have just created. + +After, commit the changes and push to github: + + $ git add roles/init/tasks/mgmtuser.yml + $ git commit -m "Changing amgmt user password." + $ git push -u origin amgmt_change_pwd + +## *bglug* user (client side but preseeded) ## + +The definition of password for *bglug* is inside `*.seed` files, inside [`server-config`][1]. Create a new password hash with: + + $ mkpasswd -m sha-512 + +Copy the hash in your clipboard; clone the repository, then in the working directory: + + $ git checkout -b bglug_change_pwd + $ find . -iname \*.seed -exec $EDITOR {} \; + +Within each `*.seed` file, search for the string `user-password-crypted` string and change following hash. + +Add, commit and push to github: + + $ git commit -am "Changing bglug password." + $ git push -u origin bglug_change_pwd + +## *admin* user (domain valid) ## + +Password must be specified within NethServer interface for the *admin* user and must be absolutely equal to the one contained inside vault file. + +Clone [`client-pull-installation`][2], create new branch and modify the password inside `domainpwd.vault`: + + $ git checkout -b admin_change_pwd + $ ansible-vault edit domainpwd.vault + +The system would ask for the vault password. Change the plain text password with your editor, then: + + $ git add domainpwd.vault + $ git commit -m "Changed admin password." + $ git push -u origin admin_change_pwd + +[1]: https://github.com/bglug-it/server-config +[2]: https://github.com/bglug-it/client-pull-installation